Whether prompt there is a ready decision allowing to set roles on editing of separate attributes of entity or groups of attributes. The difficulty lies in the fact that some entities are saved with nested ones, for example:

PUT /api/users { "name":"Some user", "email":"email@mail.com", "addresses":[ {"city":"City1", "street":"Street1"}, {"city":"City2", "street":"Street2"} ] } 

Can you create the roles ROLE_UPDATE_USER_NAME , ROLE_UPDATE_USER_EMAIL , ROLE_UPDATE_ADDRESS_CITY , ROLE_UPDATE_ADDRESS_STREET and save only those attributes that have the appropriate rights? Please tell me in which direction to move ...

    0